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FIG. 1 (Prior Art) 
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User's computer accesses a vendor's web site; requests a transaction; 
and prepares to check out. 






The vendor prepares transaction information and requests 
the user's private information. 







User's computer obtains transaction information from the vendor's 
web server. 
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User's computer obtains user indentification information, 
including the user's secret key. 



User's computer performs a MAC function on at least 
some of the transaction information and user identification 
information, using the user's secret key. 
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The result of the MAC function is provided to the 
vendor as part of the requested private information. 
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FIG. 4 
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The verifier's computer receives from the vendor via the private network the 
secure information, the transaction information, and user information that was 
used to generate the secure information. 
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The verifier's computer uses the user's secret key electronically to perform the 
same MAC function on the transaction information and user information 
received from the vendor and that purportedly was used by the user's 
computer to generate the received secure information. 



The verifier compares the results of the MAC function it performed with the 
received secure information. - - - _ _ _ _ 
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If the results of the MAC function are identical to the received secure 
information, the transaction is verified. 




